This notice explains how Dynasys CRM, a Microsoft Dynamics 365 Business Central extension published by DYNASYS (Istanbul, Türkiye), handles data. The extension runs inside your own Business Central environment. Two optional features connect to Microsoft services that you set up yourself; they are described separately below.
1. Data the Extension Reads and Writes in Business Central
- contacts (people and companies), opportunities, sales cycles, to-dos and interaction log entries;
- salespeople and the users linked to them;
- customers, their ledger entries, posted invoices, sales orders and quotes;
- its own data: events and participants, notes, sales targets, notifications, user settings, business card images, the mail tracking log and the AI usage log.
This includes personal data of your contacts (names, job titles, phone numbers, e-mail and postal addresses, interactions) and of your users.
2. Storage and Transmission
All of this data stays in your Business Central database. The extension does not send data to, or store data on, any server owned or operated by DYNASYS. Its user interface is packaged with the extension; nothing is loaded from the internet. Without the optional features in sections 3 and 4, no data leaves Business Central.
3. Optional: AI Assistant (Azure OpenAI)
The AI assistant is off unless an administrator switches it on and enters an Azure OpenAI resource of your own organisation.
- What is sent: when a user chooses an AI function, the text needed for it is sent to your Azure OpenAI resource — for example the details, interactions and open deals of a contact, company or deal for a summary; KPI figures for a commentary; the conversation for the chat assistant; the context for an e-mail draft; and the photo of a business card for scanning.
- Where it goes: only to the Azure OpenAI endpoint you configured, under your organisation's agreement with Microsoft. DYNASYS has no access to it.
- What is kept: the AI call log in Business Central records the user, feature, date, token counts and estimated cost — not the prompts or answers. The API key is stored in Business Central's isolated storage.
4. Optional: E-mail Tracking (Microsoft 365)
E-mail tracking is off unless an administrator switches it on with an app registration and shared mailbox of your own organisation.
- E-mails sent from the CRM are copied (BCC) to the tracking mailbox.
- A scheduled job in Business Central reads, through Microsoft Graph, only the sender, subject, received time and message ID of new messages in that mailbox. It does not read message bodies or attachments.
- Messages from known contacts are logged as interactions (subject and time) and in the mail tracking log. For unknown senders nothing is stored; they are only counted.
- The client secret and access token are stored in Business Central's isolated storage. The mail tracking log is deleted after the retention period you set.
5. E-mail Sending
E-mails users send from the CRM, and automation e-mails to a manager, are sent through the e-mail accounts you set up in Business Central, by your own e-mail provider. DYNASYS does not receive them.
6. Licensing
The extension is licensed through Dynasys Licensing, installed with it. The licence key and the list of licensed users are stored in your Business Central database and are checked there; no licence check is made over the internet. Request a License opens an e-mail in your own mail program, containing your company name, your Company License ID and the products in use. It is only sent if you choose to send it.
7. Telemetry and Analytics
The extension does not collect or send usage telemetry, analytics or diagnostic data to DYNASYS.
8. Retention and Deletion
Data stored by the extension is part of your Business Central database and is kept under your organisation's policies. The mail tracking log is deleted after the retention period you set. You can delete contacts, events, notes, business card images and other records at any time in Business Central; uninstalling the extension with its data removes its own data.
9. Your Role and Your Rights
Your organisation decides what data is processed in its Business Central environment and in the optional Microsoft services, and is responsible for it under applicable data protection law (such as KVKK or GDPR), including informing your contacts and having a lawful basis for storing and e-mailing them. Because all data remains in your environment and services, you have full control over access, correction, export and deletion.
10. Third-Party Services
Apart from the optional Azure OpenAI and Microsoft 365 / Microsoft Graph connections that you set up yourself, the extension does not integrate with third-party services or external APIs.
11. Changes and Contact
We may update this notice; the current version is published on this page. Questions about privacy: info@dynasys.tech — DYNASYS, Istanbul, Türkiye.